Is "JobFiltr - Job Search Power Tool" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.0.0

JobFiltr - Job Search Power Tool JobFiltr is a Chrome extension that filters and analyzes job postings on LinkedIn and Indeed in real time so you only see opportunities worth your time. KEY FEATURES: • Ghost Job Detection: AI analyzes 50+ indicators to flag jobs posted with no intention of hiring • Job Age Badges: See how old each listing is at a glance • Hide Staffing Firms: Filter out agency postings to find direct-hire opportunities • Scam & Spam Detection: Flags suspicious postings, unrealistic requirements, and data harvesting schemes • Keyword Filters: Include or exclude jobs by keywords • Hide Sponsored/Promoted: Remove pay-to-play postings cluttering your results • Remote Job Accuracy: Verify if remote listings are truly remote • Exclude Companies: Block specific companies from your search results • Salary Range Filter: Focus on jobs that match your compensation needs (Indeed) • Auto-Hide Applied Jobs: Keep your search results clean (Indeed) • Community Reports: See warnings from other job seekers about problematic companies SUPPORTED PLATFORMS: • Indeed (full feature support with bonus Indeed-exclusive filters) • LinkedIn (full support including new UI) PRIVACY FIRST: Zero tracking. Zero data selling. We analyze job postings, not you. Your search activity stays completely private. Built for job seekers tired of wading through low-quality listings. Search smarter. Product of Groundwork Labs LLC.

Risk Assessment

Analyzed
93.31
out of 100
CRITICAL

391 security findings detected across all analyzers

Chrome extension requesting 9 permissions

Severity Breakdown

0
Critical
0
High
328
Medium
63
Low
0
Info

Finding Categories

18
Network
305
IoC Indicators

YARA Rules Matched

12 rules(63 hits)
postinstall network communication LocalStorageShouldNotBeUsed postinstall file manipulation postinstall system command postinstall crypto operations AlertStatementsShouldNotBeUsed postinstall file download NoUseWeakRandom postinstall obfuscation postinstall registry modification postinstall persistence mechanism SQLInjection

Requested Permissions

9 permissions
tabs
Medium
storage
Low
unlimitedStorage
Low
scripting
Low
contextMenus
Low
notifications
Low
system.display
Low
https://*.linkedin.com/*
Low
https://*.indeed.com/*
Low

About This Extension

JobFiltr - Job Search Power Tool JobFiltr is a Chrome extension that filters and analyzes job postings on LinkedIn and Indeed in real time so you only see opportunities worth your time. KEY FEATURES: • Ghost Job Detection: AI analyzes 50+ indicators to flag jobs posted with no intention of hiring • Job Age Badges: See how old each listing is at a glance • Hide Staffing Firms: Filter out agency postings to find direct-hire opportunities • Scam & Spam Detection: Flags suspicious postings, unrealistic requirements, and data harvesting schemes • Keyword Filters: Include or exclude jobs by keywords • Hide Sponsored/Promoted: Remove pay-to-play postings cluttering your results • Remote Job Accuracy: Verify if remote listings are truly remote • Exclude Companies: Block specific companies from your search results • Salary Range Filter: Focus on jobs that match your compensation needs (Indeed) • Auto-Hide Applied Jobs: Keep your search results clean (Indeed) • Community Reports: See warnings from other job seekers about problematic companies SUPPORTED PLATFORMS: • Indeed (full feature support with bonus Indeed-exclusive filters) • LinkedIn (full support including new UI) PRIVACY FIRST: Zero tracking. Zero data selling. We analyze job postings, not you. Your search activity stays completely private. Built for job seekers tired of wading through low-quality listings. Search smarter. Product of Groundwork Labs LLC.

Detailed Findings

82 total

YARA Rule Matches

12 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
25
IP Addresses
17
Domains
265
Strings
305

All Indicators · 305

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain
detected Domain: r.ba

XIOC detected Domain: r.ba

extracted_from_files

Domain
detected Domain: u.lt

XIOC detected Domain: u.lt

extracted_from_files

Domain
detected Domain: q.ga

XIOC detected Domain: q.ga

extracted_from_files

Domain
detected Domain: vy.bv

XIOC detected Domain: vy.bv

extracted_from_files

Domain
detected Domain: d餽.bb

XIOC detected Domain: d餽.bb

extracted_from_files

Domain
detected Domain: f.sd

XIOC detected Domain: f.sd

extracted_from_files

Domain
detected Domain: y.ir

XIOC detected Domain: y.ir

extracted_from_files

Domain
detected Domain: bf.bd

XIOC detected Domain: bf.bd

extracted_from_files

Domain
detected Domain: dy.dj

XIOC detected Domain: dy.dj

extracted_from_files

Domain
detected Domain: mg.fr

XIOC detected Domain: mg.fr

extracted_from_files

Domain
detected Domain: f.us

XIOC detected Domain: f.us

extracted_from_files

Domain
detected Domain: y.il

XIOC detected Domain: y.il

extracted_from_files

Domain
detected Domain: u.tt

XIOC detected Domain: u.tt

extracted_from_files

Domain
detected Domain: 9.st

XIOC detected Domain: 9.st

extracted_from_files

Domain
detected Domain: b.bz

XIOC detected Domain: b.bz

extracted_from_files

Domain
detected Domain: jobfiltr.app

XIOC detected Domain: jobfiltr.app

extracted_from_files

Domain
detected Domain: www.jobfiltr.app

XIOC detected Domain: www.jobfiltr.app

extracted_from_files

Domain
detected Domain: x.wf

XIOC detected Domain: x.wf

extracted_from_files

Domain
detected Domain: fydj.hn

XIOC detected Domain: fydj.hn

extracted_from_files

Domain
detected Domain: y.dj

XIOC detected Domain: y.dj

extracted_from_files

Domain
detected Domain: n.dm

XIOC detected Domain: n.dm

extracted_from_files

Domain
detected Domain: 0.th

XIOC detected Domain: 0.th

extracted_from_files

Domain
detected Domain: windowinfo.id

XIOC detected Domain: windowinfo.id

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: reminiscent-goldfish-690.convex.cloud

XIOC detected Domain: reminiscent-goldfish-690.convex.cloud

extracted_from_files

Domain
detected Domain: your-deployment.convex.cloud

XIOC detected Domain: your-deployment.convex.cloud

extracted_from_files

Domain
detected Domain: success-message.show

XIOC detected Domain: success-message.show

extracted_from_files

Domain
detected Domain: email.com

XIOC detected Domain: email.com

extracted_from_files

Domain
detected Domain: bounds.top

XIOC detected Domain: bounds.top

extracted_from_files

Domain
detected Domain: windowinfo.top

XIOC detected Domain: windowinfo.top

extracted_from_files

Domain
detected Domain: targetwindow.id

XIOC detected Domain: targetwindow.id

extracted_from_files

Domain
detected Domain: win.id

XIOC detected Domain: win.id

extracted_from_files

Domain
detected Domain: jobdata.company

XIOC detected Domain: jobdata.company

extracted_from_files

Domain
detected Domain: sender.tab

XIOC detected Domain: sender.tab

extracted_from_files

Domain
detected Domain: request.data

XIOC detected Domain: request.data

extracted_from_files

Domain
detected Domain: browserwindow.id

XIOC detected Domain: browserwindow.id

extracted_from_files

Domain
detected Domain: w.id

XIOC detected Domain: w.id

extracted_from_files

Domain
detected Domain: display.id

XIOC detected Domain: display.id

extracted_from_files

Domain
detected Domain: panelwindow.id

XIOC detected Domain: panelwindow.id

extracted_from_files

Domain
detected Domain: workarea.top

XIOC detected Domain: workarea.top

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: displays.map

XIOC detected Domain: displays.map

extracted_from_files

Domain
detected Domain: paradox.ai

XIOC detected Domain: paradox.ai

extracted_from_files

Domain
detected Domain: files.com

XIOC detected Domain: files.com

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

Domain
detected Domain: www.indeed.com

XIOC detected Domain: www.indeed.com

extracted_from_files

Domain
detected Domain: targetdisplay.id

XIOC detected Domain: targetdisplay.id

extracted_from_files

Domain
detected Domain: currentdisplay.id

XIOC detected Domain: currentdisplay.id

extracted_from_files

Domain
detected Domain: style.id

XIOC detected Domain: style.id

extracted_from_files

Domain
detected Domain: dollarmatches.map

XIOC detected Domain: dollarmatches.map

extracted_from_files

Domain
detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain
detected Domain: company.name

XIOC detected Domain: company.name

extracted_from_files

Domain
detected Domain: exactmatch.name

XIOC detected Domain: exactmatch.name

extracted_from_files

Domain
detected Domain: tickets.com

XIOC detected Domain: tickets.com

extracted_from_files

Domain
detected Domain: talentify.io

XIOC detected Domain: talentify.io

extracted_from_files

Domain
detected Domain: notification.id

XIOC detected Domain: notification.id

extracted_from_files

Domain
detected Domain: breakdown.company

XIOC detected Domain: breakdown.company

extracted_from_files

Domain
detected Domain: counts.visa

XIOC detected Domain: counts.visa

extracted_from_files

Domain
detected Domain: counts.total

XIOC detected Domain: counts.total

extracted_from_files

Domain
detected Domain: reportresult.company.name

XIOC detected Domain: reportresult.company.name

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

Domain
detected Domain: gc.nr

XIOC detected Domain: gc.nr

extracted_from_files

Domain
detected Domain: s.al

XIOC detected Domain: s.al

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: data.data

XIOC detected Domain: data.data

extracted_from_files

Domain
detected Domain: job.id

XIOC detected Domain: job.id

extracted_from_files

Domain
detected Domain: colors.bg

XIOC detected Domain: colors.bg

extracted_from_files

Domain
detected Domain: li.jobs

XIOC detected Domain: li.jobs

extracted_from_files

Domain
detected Domain: www.linkedin.com

XIOC detected Domain: www.linkedin.com

extracted_from_files

Domain
detected Domain: fallbackreport.company

XIOC detected Domain: fallbackreport.company

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: breakdown.community

XIOC detected Domain: breakdown.community

extracted_from_files

Domain
detected Domain: job.company

XIOC detected Domain: job.company

extracted_from_files

Domain
detected Domain: cached.data

XIOC detected Domain: cached.data

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: reportresult.company

XIOC detected Domain: reportresult.company

extracted_from_files

Domain
detected Domain: jobs.map

XIOC detected Domain: jobs.map

extracted_from_files

Domain
detected Domain: selectors.company

XIOC detected Domain: selectors.company

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: floatingcontainer.id

XIOC detected Domain: floatingcontainer.id

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: signals.map

XIOC detected Domain: signals.map

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: www.chartjs.org

XIOC detected Domain: www.chartjs.org

extracted_from_files

Domain
detected Domain: www.jsdelivr.com

XIOC detected Domain: www.jsdelivr.com

extracted_from_files

Domain
detected Domain: s.clienty-t.top

XIOC detected Domain: s.clienty-t.top

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: s.top

XIOC detected Domain: s.top

extracted_from_files

Domain
detected Domain: e.host

XIOC detected Domain: e.host

extracted_from_files

Domain
detected Domain: this.events

XIOC detected Domain: this.events

extracted_from_files

Domain
detected Domain: oe.numeric.call

XIOC detected Domain: oe.numeric.call

extracted_from_files

Domain
detected Domain: ht.call

XIOC detected Domain: ht.call

extracted_from_files

Domain
detected Domain: t.save

XIOC detected Domain: t.save

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: t.family

XIOC detected Domain: t.family

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: r.top

XIOC detected Domain: r.top

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: t.canvas.style

XIOC detected Domain: t.canvas.style

extracted_from_files

Domain
detected Domain: e.family

XIOC detected Domain: e.family

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: e.bottom-e.top

XIOC detected Domain: e.bottom-e.top

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: i.style

XIOC detected Domain: i.style

extracted_from_files

Domain
detected Domain: e.box

XIOC detected Domain: e.box

extracted_from_files

Domain
detected Domain: g.top

XIOC detected Domain: g.top

extracted_from_files

Domain
detected Domain: i.outerheight-n.bottom-n.top

XIOC detected Domain: i.outerheight-n.bottom-n.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: r.box

XIOC detected Domain: r.box

extracted_from_files

Domain
detected Domain: this.datasetelementtype.id

XIOC detected Domain: this.datasetelementtype.id

extracted_from_files

Domain
detected Domain: i.data

XIOC detected Domain: i.data

extracted_from_files

Domain
detected Domain: cachedmeta.data

XIOC detected Domain: cachedmeta.data

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: a.properties

XIOC detected Domain: a.properties

extracted_from_files

Domain
detected Domain: t.to

XIOC detected Domain: t.to

extracted_from_files

Domain
detected Domain: margins.top

XIOC detected Domain: margins.top

extracted_from_files

Domain
detected Domain: this.fit

XIOC detected Domain: this.fit

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: this.chart.data

XIOC detected Domain: this.chart.data

extracted_from_files

Domain
detected Domain: this.top

XIOC detected Domain: this.top

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: this.dataelementtype.id

XIOC detected Domain: this.dataelementtype.id

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: object.prototype.isprototypeof.call

XIOC detected Domain: object.prototype.isprototypeof.call

extracted_from_files

Domain
detected Domain: c.top

XIOC detected Domain: c.top

extracted_from_files

Domain
detected Domain: e.save

XIOC detected Domain: e.save

extracted_from_files

Domain
detected Domain: i.save

XIOC detected Domain: i.save

extracted_from_files

Domain
detected Domain: o-e.top

XIOC detected Domain: o-e.top

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: this.config.data

XIOC detected Domain: this.config.data

extracted_from_files

Domain
detected Domain: o.canvas.id

XIOC detected Domain: o.canvas.id

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: config.data

XIOC detected Domain: config.data

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: todo.id

XIOC detected Domain: todo.id

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

Domain
detected Domain: this.options.events

XIOC detected Domain: this.options.events

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: n.top-i.top

XIOC detected Domain: n.top-i.top

extracted_from_files

Domain
detected Domain: t.events

XIOC detected Domain: t.events

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: r.style

XIOC detected Domain: r.style

extracted_from_files

Domain
detected Domain: t.plugin.id

XIOC detected Domain: t.plugin.id

extracted_from_files

Domain
detected Domain: g.center

XIOC detected Domain: g.center

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: cachedmeta.total

XIOC detected Domain: cachedmeta.total

extracted_from_files

Domain
detected Domain: s.total

XIOC detected Domain: s.total

extracted_from_files

Domain
detected Domain: e.labels.map

XIOC detected Domain: e.labels.map

extracted_from_files

Domain
detected Domain: 2-e.top

XIOC detected Domain: 2-e.top

extracted_from_files

Domain
detected Domain: o.save

XIOC detected Domain: o.save

extracted_from_files

Domain
detected Domain: bo.prototype.generateticklabels.call

XIOC detected Domain: bo.prototype.generateticklabels.call

extracted_from_files

Domain
detected Domain: o-s.top

XIOC detected Domain: o-s.top

extracted_from_files

Domain
detected Domain: padding.top

XIOC detected Domain: padding.top

extracted_from_files

Domain
detected Domain: l.top

XIOC detected Domain: l.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: i.target

XIOC detected Domain: i.target

extracted_from_files

Domain
detected Domain: t.data.map

XIOC detected Domain: t.data.map

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: po.call

XIOC detected Domain: po.call

extracted_from_files

Domain
detected Domain: cache.data

XIOC detected Domain: cache.data

extracted_from_files

Domain
detected Domain: this.ticks.map

XIOC detected Domain: this.ticks.map

extracted_from_files

Domain
detected Domain: t.adapters.date

XIOC detected Domain: t.adapters.date

extracted_from_files

Domain
detected Domain: companyinfo.id

XIOC detected Domain: companyinfo.id

extracted_from_files

Domain
detected Domain: companyinfo.name

XIOC detected Domain: companyinfo.name

extracted_from_files

Domain
detected Domain: xmlhttprequest.prototype.open

XIOC detected Domain: xmlhttprequest.prototype.open

extracted_from_files

Domain
detected Domain: chart.umd.js.map

XIOC detected Domain: chart.umd.js.map

extracted_from_files

Domain
detected Domain: i.external.call

XIOC detected Domain: i.external.call

extracted_from_files

Domain
detected Domain: n.show

XIOC detected Domain: n.show

extracted_from_files

Domain
detected Domain: s.save

XIOC detected Domain: s.save

extracted_from_files

Domain
detected Domain: toastcontainer.id

XIOC detected Domain: toastcontainer.id

extracted_from_files

Domain
detected Domain: this.save

XIOC detected Domain: this.save

extracted_from_files

Domain
detected Domain: this.storage

XIOC detected Domain: this.storage

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: entity.name

XIOC detected Domain: entity.name

extracted_from_files

Domain
detected Domain: job.companyresolutionresult.name

XIOC detected Domain: job.companyresolutionresult.name

extracted_from_files

Domain
detected Domain: job.companydetails.company.name

XIOC detected Domain: job.companydetails.company.name

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain
detected Domain: response.page

XIOC detected Domain: response.page

extracted_from_files

Domain
detected Domain: banner.id

XIOC detected Domain: banner.id

extracted_from_files

Domain
detected Domain: response.tab

XIOC detected Domain: response.tab

extracted_from_files

Domain
detected Domain: button.dataset.tab

XIOC detected Domain: button.dataset.tab

extracted_from_files

Domain
detected Domain: currentuser.email

XIOC detected Domain: currentuser.email

extracted_from_files

Domain
detected Domain: currentuser.name

XIOC detected Domain: currentuser.name

extracted_from_files

Domain
detected Domain: breakdown.financial

XIOC detected Domain: breakdown.financial

extracted_from_files

Domain
detected Domain: data.company

XIOC detected Domain: data.company

extracted_from_files

Domain
detected Domain: template.name

XIOC detected Domain: template.name

extracted_from_files

Domain
detected Domain: item.dataset.id

XIOC detected Domain: item.dataset.id

extracted_from_files

Domain
detected Domain: template.id

XIOC detected Domain: template.id

extracted_from_files

Domain
detected Domain: sorted.map

XIOC detected Domain: sorted.map

extracted_from_files

Domain
detected Domain: othertab.id

XIOC detected Domain: othertab.id

extracted_from_files

Domain
detected Domain: message.site

XIOC detected Domain: message.site

extracted_from_files

Domain
detected Domain: j.id

XIOC detected Domain: j.id

extracted_from_files

Domain
detected Domain: e.currenttarget.dataset.id

XIOC detected Domain: e.currenttarget.dataset.id

extracted_from_files

Domain
detected Domain: currentjobdata.company

XIOC detected Domain: currentjobdata.company

extracted_from_files

Domain
detected Domain: scan.company

XIOC detected Domain: scan.company

extracted_from_files

Domain
detected Domain: matchedpatterns.map

XIOC detected Domain: matchedpatterns.map

extracted_from_files

Domain
detected Domain: communityreported.company

XIOC detected Domain: communityreported.company

extracted_from_files

Domain
detected Domain: doc.id

XIOC detected Domain: doc.id

extracted_from_files

Domain
detected Domain: doc.name

XIOC detected Domain: doc.name

extracted_from_files

Domain
detected Domain: docs.map

XIOC detected Domain: docs.map

extracted_from_files

Domain
detected Domain: file.name

XIOC detected Domain: file.name

extracted_from_files

Domain
detected Domain: fileinput.click

XIOC detected Domain: fileinput.click

extracted_from_files

Domain
detected Domain: vnd.ms

XIOC detected Domain: vnd.ms

extracted_from_files

Domain
detected Domain: message.page

XIOC detected Domain: message.page

extracted_from_files

Domain
detected Domain: currentpreviewdoc.id

XIOC detected Domain: currentpreviewdoc.id

extracted_from_files

Domain
detected Domain: link.click

XIOC detected Domain: link.click

extracted_from_files

Domain
detected Domain: currentpreviewdoc.name

XIOC detected Domain: currentpreviewdoc.name

extracted_from_files

Domain
detected Domain: link.download

XIOC detected Domain: link.download

extracted_from_files

Domain
detected Domain: currentpreviewdoc.data

XIOC detected Domain: currentpreviewdoc.data

extracted_from_files

Domain
detected Domain: doc.data

XIOC detected Domain: doc.data

extracted_from_files

Domain
detected Domain: card.dataset.id

XIOC detected Domain: card.dataset.id

extracted_from_files

Domain
detected Domain: data.map

XIOC detected Domain: data.map

extracted_from_files

Domain
detected Domain: labels.map

XIOC detected Domain: labels.map

extracted_from_files

Domain
detected Domain: monthnames.map

XIOC detected Domain: monthnames.map

extracted_from_files

Domain
detected Domain: e.plugin.id

XIOC detected Domain: e.plugin.id

extracted_from_files

Domain
detected Domain: e.options.events

XIOC detected Domain: e.options.events

extracted_from_files

Domain
detected Domain: todos.active.map

XIOC detected Domain: todos.active.map

extracted_from_files

IP
detected Domain: visa-sponsorship-hint.info

XIOC detected Domain: visa-sponsorship-hint.info

extracted_from_files

IP
detected Domain: visa-sponsorship-info.no

XIOC detected Domain: visa-sponsorship-info.no

extracted_from_files

Domain
detected Domain: urgently-hiring-hint.info

XIOC detected Domain: urgently-hiring-hint.info

extracted_from_files

Domain
detected Domain: urgently-hiring-count.no

XIOC detected Domain: urgently-hiring-count.no

extracted_from_files

Domain
detected Domain: benefit-tag.health

XIOC detected Domain: benefit-tag.health

extracted_from_files

Domain
detected Domain: chartdata.map

XIOC detected Domain: chartdata.map

extracted_from_files

Domain
detected Domain: d.date

XIOC detected Domain: d.date

extracted_from_files

Domain
detected Domain: score-value.safe

XIOC detected Domain: score-value.safe

extracted_from_files

Domain
detected Domain: template-item.is-favorite.is

XIOC detected Domain: template-item.is-favorite.is

extracted_from_files

Domain
detected Domain: template-item.is

XIOC detected Domain: template-item.is

extracted_from_files

Domain
detected Domain: sponsored-hint.info

XIOC detected Domain: sponsored-hint.info

extracted_from_files

Domain
detected Domain: sponsored-count.no

XIOC detected Domain: sponsored-count.no

extracted_from_files

Domain
detected Domain: early-applicant-hint.info

XIOC detected Domain: early-applicant-hint.info

extracted_from_files

Domain
detected Domain: early-applicant-count.no

XIOC detected Domain: early-applicant-count.no

extracted_from_files

IP
detected Domain: subscription-badge-container.pro

XIOC detected Domain: subscription-badge-container.pro

extracted_from_files

Domain
detected Domain: header-plan-badge.pro

XIOC detected Domain: header-plan-badge.pro

extracted_from_files

Domain
detected Domain: header-plan-badge.free

XIOC detected Domain: header-plan-badge.free

extracted_from_files

IP
detected Domain: subscription-badge.pro

XIOC detected Domain: subscription-badge.pro

extracted_from_files

IP
detected Domain: subscription-badge.free

XIOC detected Domain: subscription-badge.free

extracted_from_files

Domain
detected Domain: breakdown-value.safe

XIOC detected Domain: breakdown-value.safe

extracted_from_files

Domain
detected Domain: breakdown-bar-fill.safe

XIOC detected Domain: breakdown-bar-fill.safe

extracted_from_files

URL
detected URL: https://realfavicongenerator.net/

XIOC detected URL: https://realfavicongenerator.net/

extracted_from_files

URL
detected URL: https://www.favicon-generator.org/

XIOC detected URL: https://www.favicon-generator.org/

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: https://*.linkedin.com/*

XIOC detected URL: https://*.linkedin.com/*

extracted_from_files

URL
detected URL: https://*.indeed.com/*

XIOC detected URL: https://*.indeed.com/*

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

XIOC detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

extracted_from_files

URL
detected URL: https://www.indeed.com/viewjob?jk=$

XIOC detected URL: https://www.indeed.com/viewjob?jk=$

extracted_from_files

URL
detected URL: https://reminiscent-goldfish-690.convex.cloud';

XIOC detected URL: https://reminiscent-goldfish-690.convex.cloud';

extracted_from_files

URL
detected URL: https://jobfiltr.app

XIOC detected URL: https://jobfiltr.app

extracted_from_files

URL
detected URL: https://your-deployment.convex.cloud

XIOC detected URL: https://your-deployment.convex.cloud

extracted_from_files

URL
detected URL: https://jobfiltr.app/*

XIOC detected URL: https://jobfiltr.app/*

extracted_from_files

URL
detected URL: https://www.jobfiltr.app/*

XIOC detected URL: https://www.jobfiltr.app/*

extracted_from_files

URL
detected URL: https://jobfiltr.app/dashboard'

XIOC detected URL: https://jobfiltr.app/dashboard'

extracted_from_files

URL
detected URL: https://github.com/kurkle/color#readme

XIOC detected URL: https://github.com/kurkle/color#readme

extracted_from_files

URL
detected URL: https://www.chartjs.org

XIOC detected URL: https://www.chartjs.org

extracted_from_files

URL
detected URL: https://www.jsdelivr.com/using-sri-with-dynamic-files

XIOC detected URL: https://www.jsdelivr.com/using-sri-with-dynamic-files

extracted_from_files

URL
detected URL: https://jobfiltr.app/dashboard',

XIOC detected URL: https://jobfiltr.app/dashboard',

extracted_from_files

URL
detected URL: https://reminiscent-goldfish-690.convex.site';

XIOC detected URL: https://reminiscent-goldfish-690.convex.site';

extracted_from_files

URL
detected URL: https://www.linkedin.com/voyager/api/jobs/jobPostings/$

XIOC detected URL: https://www.linkedin.com/voyager/api/jobs/jobPostings/$

extracted_from_files

Hash
detected SHA1 Hash: cdd9cee1374c54823b8c7ebd3844e5522906c5d6

XIOC detected SHA1 Hash: cdd9cee1374c54823b8c7ebd3844e5522906c5d6

extracted_from_files

URL
detected URL: https://your-deployment.convex.cloud)');

XIOC detected URL: https://your-deployment.convex.cloud)');

extracted_from_files

URL
detected URL: https://jobfiltr.app';

XIOC detected URL: https://jobfiltr.app';

extracted_from_files

URL
detected URL: https://jobfiltr.app/dashboard#subscription'

XIOC detected URL: https://jobfiltr.app/dashboard#subscription'

extracted_from_files

URL
detected URL: https://jobfiltr.app/privacy'

XIOC detected URL: https://jobfiltr.app/privacy'

extracted_from_files

URL
detected URL: https://jobfiltr.app/contact'

XIOC detected URL: https://jobfiltr.app/contact'

extracted_from_files

URL
detected URL: https://www.jobfiltr.app/extension-auth';

XIOC detected URL: https://www.jobfiltr.app/extension-auth';

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

Domain
detected Domain: k.nr

XIOC detected Domain: k.nr

extracted_from_files

Domain
detected Domain: q.ve

XIOC detected Domain: q.ve

extracted_from_files

Domain
detected Domain: q.bb

XIOC detected Domain: q.bb

extracted_from_files

IP
detected IP: ed::bef

XIOC detected IP: ed::bef

extracted_from_files

Domain
detected Domain: www.favicon-generator.org

XIOC detected Domain: www.favicon-generator.org

extracted_from_files

Domain
detected Domain: realfavicongenerator.net

XIOC detected Domain: realfavicongenerator.net

extracted_from_files

Domain
detected Domain: jlr.cr

XIOC detected Domain: jlr.cr

extracted_from_files

IP
detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

Domain
detected Domain: c2pa.hash.data

XIOC detected Domain: c2pa.hash.data

extracted_from_files

Domain
detected Domain: va.truepic.com

XIOC detected Domain: va.truepic.com

extracted_from_files

IP
detected IP: ::3

XIOC detected IP: ::3

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

IP
detected IP: ::2

XIOC detected IP: ::2

extracted_from_files

IP
detected IP: ::9

XIOC detected IP: ::9

extracted_from_files

Domain
detected Domain: reminiscent-goldfish-690.convex.site

XIOC detected Domain: reminiscent-goldfish-690.convex.site

extracted_from_files

IP
detected Domain: script.id

XIOC detected Domain: script.id

extracted_from_files

Domain
detected Domain: span.date

XIOC detected Domain: span.date

extracted_from_files

Domain
detected Domain: el.dataset.id

XIOC detected Domain: el.dataset.id

extracted_from_files

Domain
detected Domain: todos.completed.map

XIOC detected Domain: todos.completed.map

extracted_from_files

Domain
detected Domain: 2.ps

XIOC detected Domain: 2.ps

extracted_from_files

Domain
detected Domain: h.data

XIOC detected Domain: h.data

extracted_from_files

AI Security Report

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-04-27. The review verdict is likely false positive with 78% confidence.

Recommended action: suppress false positive.
Risk context: CRITICAL risk, score 93/100.
Evidence context: threat category none; evidence quality moderate.

JobFiltr - Job Search Power Tool Security Analysis

This extension enhances job search functionality on LinkedIn and Indeed with ghost job detection and scam filtering capabilities. The evidence bundle contains 391 total findings, but the nature of these findings—not their count—determines the security verdict.

IoC Findings Are False Positives

The 309 IoC findings represent classic XIOC extractor false positives. Domains like docs.map, doc.id, matchedpatterns.map, and communityreported.company are property access chains in JavaScript code being misread as network domains. For example, doc.id is code accessing the .id property on a doc object, not a network request to doc.id. Similarly, matchedpatterns.map represents array iteration, not a domain. These patterns match the documented XIOC false-positive profile for property access chains. The domains fileinput.click and file.name could be legitimate file-sharing services, but without evidence of actual network transmission to these domains, they remain inconclusive.

Network Behavior Is Legitimate

The 18 network findings show fetch calls in src/popup-v2.js:5407, src/content-linkedin-v3.js:4221, src/settings.js:1228, and src/popup-v2.js:5416. These are expected for a job search tool that communicates with backend services to filter job listings and detect scams. No suspicious domains appear in the actual network findings—only the fetch function itself is flagged.

Code-Smell Findings Are Noise

The 63 code-smell findings are low-severity matches on common JavaScript patterns. Per the CVEQ guidelines, rules like postinstall_*, credential_*, and code-quality rules fire on almost any non-trivial JavaScript and should not drive security verdicts. These findings have severity low and finding_type code-smell, which the guidelines classify as noise.

Critical Security Indicators Are Absent

The extension has zero malware signatures, zero malware findings, and zero obfuscation findings. The manifest declares the tabs permission (MANIFEST-SENSITIVE-PERM-TABS in manifest.json), which is expected for a content-modifying extension that needs to read and modify job listing pages.

Counterargument

A skeptic might point to the high finding count (391) and low user count (1) as indicators of risk. However, the finding count is inflated by known false-positive patterns: 309 IoC false positives from property access chains and 63 code-smell noise findings. The low user count reflects a new extension rather than malicious intent. The extension has zero malware signatures, zero obfuscation, and no suspicious domains in actual network activity—all positive security indicators. The developer attribution uses an email address ([email protected]) rather than a company name, which is less professional but not malicious.

Conclusion

This extension is a legitimate job search tool with findings driven by documented false-positive patterns. The verdict is likely_false_positive.

Key Reasons

  • Zero malware signatures and zero malware findings
  • 309 IoC findings are property access chains misread as domains (XIOC false positives)
  • Zero obfuscation findings
  • Network findings show expected fetch calls for job search functionality
  • 63 code-smell findings are low-severity noise per CVEQ guidelines

False Positive Considerations

  • XIOC property access chains misread as domains
  • Code-smell findings on common JavaScript patterns
  • High finding count driven by false positive patterns

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Ship Xanh copy sản phẩm, nhân bản shop, hiển thị % phí sàn, lượt bán tháng

[email protected]

CRITICAL 20K users

SVG to AVIF Converter [ShiftShift]

[email protected]

CRITICAL 4 users

ChromeCompare

[email protected]

CRITICAL 16 users

CAI Tools

[email protected]

CRITICAL 40K users

Auto Gmail - ChatGPT AI for email inbox

[email protected]

CRITICAL 1K users

EC Seller Tools

[email protected]

CRITICAL 1K users